<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Identity: The 100 Point Check</title>
	<atom:link href="http://securitypie.com/100-point-check/feed/" rel="self" type="application/rss+xml" />
	<link>http://securitypie.com/100-point-check/</link>
	<description>The ramblings of three security curmudgeons</description>
	<lastBuildDate>Mon, 05 Jul 2010 02:16:52 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
	<item>
		<title>By: arikb</title>
		<link>http://securitypie.com/100-point-check/comment-page-1/#comment-22</link>
		<dc:creator>arikb</dc:creator>
		<pubDate>Fri, 03 Oct 2008 02:28:23 +0000</pubDate>
		<guid isPermaLink="false">http://securitypie.com/?p=152#comment-22</guid>
		<description>That&#039;s not the point, Assaf...

Identity won&#039;t be perfect, but there are better and worse practices:

* Web of trust - better
* Aggregating 4 documents (credit cards) which content an attacker can control completely to reach 100 points - worse

So you&#039;re right, there&#039;s no perfect identity; There is however pretty good identity, and that&#039;s not it.

-- Arik</description>
		<content:encoded><![CDATA[<p>That&#8217;s not the point, Assaf&#8230;</p>
<p>Identity won&#8217;t be perfect, but there are better and worse practices:</p>
<p>* Web of trust &#8211; better<br />
* Aggregating 4 documents (credit cards) which content an attacker can control completely to reach 100 points &#8211; worse</p>
<p>So you&#8217;re right, there&#8217;s no perfect identity; There is however pretty good identity, and that&#8217;s not it.</p>
<p>&#8211; Arik</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: assafl</title>
		<link>http://securitypie.com/100-point-check/comment-page-1/#comment-20</link>
		<dc:creator>assafl</dc:creator>
		<pubDate>Fri, 03 Oct 2008 00:00:10 +0000</pubDate>
		<guid isPermaLink="false">http://securitypie.com/?p=152#comment-20</guid>
		<description>Dude - perfect identity belongs in a perfect world. That ended with the &#039;90s.

More seriously, it is like the identification verification systems for banks in the US. While no formal point count is used (I like that - do you get a point card like at Jamba Juice on your way to a free Bananalicious Delight?), they do indeed have certain combinations: like passport and credit card, two credit cards - one with picture, electric bill and driver&#039;s license, gun license with gun, etc.

Same thing but with no free smoothie.

Time for chip implants for all you guys, so we can identify you. Meanwhile I&#039;ll join the troglodyte resistance.

-al</description>
		<content:encoded><![CDATA[<p>Dude &#8211; perfect identity belongs in a perfect world. That ended with the &#8217;90s.</p>
<p>More seriously, it is like the identification verification systems for banks in the US. While no formal point count is used (I like that &#8211; do you get a point card like at Jamba Juice on your way to a free Bananalicious Delight?), they do indeed have certain combinations: like passport and credit card, two credit cards &#8211; one with picture, electric bill and driver&#8217;s license, gun license with gun, etc.</p>
<p>Same thing but with no free smoothie.</p>
<p>Time for chip implants for all you guys, so we can identify you. Meanwhile I&#8217;ll join the troglodyte resistance.</p>
<p>-al</p>
]]></content:encoded>
	</item>
</channel>
</rss>

